DEBIAN-CVE-2007-2438

DEBIAN-CVE-2007-2438 PUBLISHED

The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines.

Affected Products

Vendor	Product	Versions
Debian:11	vim	0, 0, 0
Debian:14	vim	0, 0, 0
Debian:13	vim	0, 0, 0
Debian:12	vim	0, 0, 0

Exploit Intelligence

glcve_test.go (github-poc)

Timeline

May 2, 2007 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2007-2438 advisory

Open in Interactive Console →